CVE-2026-13512

creationtimestamp| type| source ---|---|--- 2026-06-28 23:34:59+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpf575sg2g25 2026-06-29 01:58:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpff7uizmg27...

CVE-2026-13512

A vulnerability was identified in Databend up to 1.2.881 on HTTP. This affects the function ClientSessionManager::statekey of the file src/query/service/src/servers/http/v1/session/clientsessionmanager.rs of the component Tenant Handler. The manipulation leads to authorization bypass. It is...